PREAMBLE

This document, entitled "Legal Provisions for the Attention of the Authorities" is the official reference of the Publisher of the Application "NOX – The Social Alarm Clock" for the attention of the administrative, judicial, police and regulatory authorities, French or foreign, in the context of their legal missions of control, investigation, requisition, reporting or request for information.

Its purpose is to formalize the cooperation commitments made by the publishing company, LAPSUS, as well as to describe in detail:

• procedures for requests from a legitimate authority;
• the legal rules governing the transmission of information or content;
• the conditions of authentication, traceability and storage of exchanges;
• Priority treatment commitments in cases involving child safety or the fight against serious offences.

This policy is in line with the laws and regulations in force, in particular:

• the Law for Confidence in the Digital Economy (LCEN) of 21 June 2004,
• the General Data Protection Regulation (GDPR – EU 2016/679),
• the Digital Services Act (DSA) Regulation (EU) 2022/2065,
• the provisions of the Code of Criminal Procedure, and more generally of French law and European Union law applicable to digital services.

This policy is also part of the contractual documents governing access to and use of the Application, in particular the Legal Notices, the Terms of Use, the General Sales Conditions, the Privacy Policy, the Data Collection Policy, the Illicit Content Reporting and Removal Policy, the Child Safety Policy, the Copyright and Intellectual Property Policy, the Advertising and Sponsored Content Policy, the Moderation Policy, the List of Prohibited Content

This document is publicly available at: https://www.nox.app/legal/provisions-for-authorities

It is updated regularly to ensure cooperation in line with legal, technical and institutional developments. For any official communication, the authorities may contact the Publisher at the following address: authorities@nox.app

USERS ARE STRONGLY ADVISED TO READ THESE "LEGAL PROVISIONS FOR THE ATTENTION OF THE AUTHORITIES" CAREFULLY BEFORE USING "NOX".

INTRODUCTION

"NOX – The Social Alarm CLock" is an innovative social network based on the new concept of the personalized alarm clock. The Application allows its Users to create, send, receive and watch short videos – called "nox" – intended to wake up in a fun and interactive way. The principle of "NOX" is to create a new global and intergenerational space for creation and expression that transforms the moment of awakening into a social and entertaining experience.

"NOX" exists solely in the form of a mobile application designed, created, developed and published by the French company LAPSUS, a simplified joint-stock company with a capital of €12,000, whose registered office is located at 10 rue Louis Amiot, 01000 Bourg-en-Bresse, registered with the Bourg-en-Bresse Trade and Companies Register under number 879 161 818, and represented by Mr. Luc NOUGUIER, President of LAPSUS (hereinafter "the Publisher").

The NOX app is available for download worldwide since Monday, April 14, 2025 on the following platforms:

• Apple "App Store"
• Google's "Play Store"
• Amazon "Amazon Appstore"
• Samsung's "Galaxy Store"
• Huawei Technologies "Huawei AppGallery"
• Xiaomi "Xiaomi Get Apps"
• Oppo "App Market"
• Vivo "V-Appstore"
• Tencent "Appstore"
• Xiaomi's "Mi Store App"
• "Aptoide" by Aptoide S.A
• "APKPure"

Aware of its responsibilities, LAPSUS, publisher of the Application, has put in place a clear, transparent policy that complies with the regulations, in order to enable the competent authorities:

• Identify content or accounts.
• to request technical or personal data;
• to formulate judicial or administrative requisitions;
• or to report offences, according to formalised and supervised procedures.

This document sets out the rules, processes and commitments for such cooperation. Its purpose is to facilitate official exchanges, to guarantee the legal certainty of requests, and to allow a rapid, effective response in accordance with the applicable obligations.

As an open digital platform, "NOX" is committed to:

• ensure the safety of Users, in particular minors;
• actively combat abuses, violations of fundamental rights and criminal offences;
• and cooperate fully with the competent authorities, in compliance with applicable law.

1. DEFINITIONS

For the purposes of these "Legal Provisions for the Attention of the Authorities", the following terms shall have the following meanings, whether used in the singular or plural:

Contractual Terms: refers to all legal documents applicable to the use of the Application, including the Legal Notices, Terms of Use, General Sales Conditions, Privacy Policy, Data Collection Policy, Illicit Content Reporting and Removal Policy, the Child Safety Policy, the Copyright and Intellectual Property Policy, the Advertising and Sponsored Content Policy, theModeration Policy,List of Prohibited Content, Code of Conduct, and Legal Provisions for the Attention of the Authorities.

Application: refers to the mobile application "NOX – The Social Alarm Clock," created, developed, and published by the Publisher. The Application is intended to be downloaded and installed on a compatible Device (smartphone or tablet), and allows the use of features offered by the Publisher, such as the creation and reading of "noxs." Subject to compliance with the "Terms of Use" and Legal Noticesand any technical requirements, the Application is available on the following download platforms: Apple’s "App Store," Google’s "Play Store," Amazon’s "Amazon Appstore," Samsung’s "Galaxy Store," Huawei Technologies' "Huawei AppGallery," Xiaomi's "Xiaomi Get Apps," Oppo’s "Oppo App Market," AppGallery," Xiaomi's "Xiaomi Get Apps," Oppo’s "Oppo App Market," Vivo's "V-Appstore," Tencent’s "Tencent Appstore," Xiaomi’s "Mi Store App," Aptoide S.A’s "Aptoide," "APKPure." Access to and updates of the Application, as well as any geographical or technical restrictions, may vary depending on the app stores and the applicable policies.

Publisher: refers to the French company LAPSUS, a simplified joint-stock company (SAS) registered with the Bourg-en-Bresse Trade and Companies Register under number 879 161 818, with its registered office located at 10 rue Louis Amiot, Bourg-en-Bresse. The Publisher is legally responsible for the brand and the "NOX – The Social Alarm Clock" Application. The Publisher is responsible for the design, development, publishing, and Publisher is responsible for the design, development, publishing, and availability of the Application, as well as all associated Services. It is also responsible for publishing and maintaining the technical aspects of the Application, including any updates or new features offered to Users.

User: refers to any individual who accesses and uses the Application for private or professional purposes. The User may be a non-professional individual, a consumer as defined by the Consumer Code, or any other person using the Publisher's services. The User may therefore enter into an agreement with the Publisher to acquire content or use features available on the Application, under the conditions defined by the "Terms of Use" of the Application.

Minor: refers to any person under the age of 15. This age corresponds to the minimum required to register on the Application, as set by the Publisher in accordance with applicable legislation, particularly concerning the protection of minors and digital consent, as well as the "Child Safety Policy".

Child: refers to any minor within the scope of the "Child Safety Policy", including those who have accessed the Application in violation of the registration conditions. The rules stated here aim to ensure the safety of children under all circumstances, including in cases of unauthorized or fraudulent access.

Parties: refers collectively to the Publisher of the Application and the User, bound by the acceptance of the applicable contractual documents, including the "Terms of Use", "General Sales Conditions", and "Legal Notices". The Parties acknowledge their mutual commitments, respective responsibilities, and the legal rules governing their relationship in the context of using the Services offered through the Application.

Device: refers to any hardware used by the User to access the Application, download, install, and use its features. This includes, but is not limited to, smartphones, tablets, laptops or desktop computers, and compatible connected objects. The Device must meet the minimum technical requirements set by the Publisher, including operating system, available memory, performance, and connectivity. The User is solely responsible for installing the Application on their own Device, ensuring its compatibility, proper functioning, and security of their digital environment, including regular system updates, the use of antivirus digital environment, including regular system updates, the use of antivirus software, and protection against malware.

Download Platform or Store: refers to any third-party service that allows downloading or updating the Application, such as Apple’s "App Store," Google’s "Play Store," Amazon’s "Amazon Appstore," Samsung’s "Galaxy Store," Huawei Technologies' "Huawei AppGallery," Xiaomi's "Xiaomi Get Apps," Oppo’s "Oppo App Market," Vivo's "V-Appstore," Tencent’s "Tencent Appstore," Xiaomi’s "Mi Store App," Aptoide S.A’s "Aptoide," "APKPure." Appstore," Xiaomi’s "Mi Store App," Aptoide S.A’s "Aptoide," "APKPure." Access to these platforms is subject to the general terms and conditions of each provider, over which the Publisher has no control.

Service: refers to all the features and services offered by the Publisher via the Application, including but not limited to:

• Creation, publishing, sending, and reading of "noxs";
• Programming and triggering alarms to automatically play one or more "nox(s)";
• Creation, publishing, sending, and reading of "dreams";
• Management of a personal profile;
• Visiting other Users' personal profiles;
• Textual, visual, and voice communication with Users via messaging;
• Access to subscription plans such as "NOX Premium", which provides additional features or benefits;
• Any other service or content that the Publisher decides to make available to the User, subject to compliance with the "Terms of Use", "Legal Notices", and applicable laws.

The Service is subject to change or enhancement over time, including through updates, fixes, interface modifications, or the addition of new offers, whether free or paid, without creating any obligation for the Publisher beyond what is specified herein or in specific conditions.

Host: refers to the technical service provider responsible for ensuring the storage, accessibility, and operational maintenance of the Application and its digital content. The Host acts as a technical intermediary in accordance with applicable legislation (notably the LCEN and DSA), without intervening in the hosted content. The Host’s contact information is provided in the "Legal Notices", "Terms of Use", and "Privacy Policy", in accordance with the identification requirements imposed on the Publisher.

User Account: refers to the personal space of each User, accessible after a registration or login process via an identifier (email address, phone number, etc.) and a strictly confidential password. From this space, the User can, among other things:

• Add or modify their profile picture;
• Add or modify up to ten cover photos;
• Add or modify their profile description;
• Add content to their profile ("noxs," "renoxs," dream collection);
• Modify the thumbnails of their created "noxs";
• Pin created "noxs";
• Pin "renoxs";
• Delete content from their profile ("noxs," "renoxs," dream collection);
• Access their list of received notifications;
• Manage their subscription list;
• Access their list of followers;
• Manage their list of friends;
• Modify their name;
• Modify their username;
• Modify the email address for accessing their account;
• Modify the phone number for accessing their account;
• Modify the password for accessing their account;
• Send a request for personal data transmission;
• Subscribe to or unsubscribe from the paid service "NOX Premium";
• Send a request for account certification;
• Manage privacy settings;
• Access their liked "noxs";
• Access their viewed "noxs";
• Access the archives of created "dreams";
• Access the archives of created "noxs";
• Modify the application language;
• Modify the application appearance;
• Manage blocked Users;
• Manage sensitive content settings;
• Access the Application's user guide;
• Access the legal information of the Application;
• Access the social media of the Application and the Publisher;
• Delete their account.

The User Account is personal, non-transferable, and protected by confidential identifiers whose security is the sole responsibility of the User. The User commits to immediately inform the Publisher of any suspicion of fraudulent access or compromise of their account and to comply with the applicable "Terms of Use".

Evolving Features: refers to any new feature, tool, or service added later to the Application, whether experimental, promotional, or permanent, subject to the "Terms of Use" and applicable rights.

Social Features: refers to the tools for interaction between Users within the Application, such as messaging, comments, subscriptions, "likes," shares, and any communication, visibility, or community relationship feature integrated by the Publisher.

Inappropriate Behavior: refers to any behavior or interaction, direct or indirect, contrary to the spirit of the "Code of Conduct", which may harm the well-being of other Users or compromise the overall atmosphere of the Application.

Content: refers to any type of digital content accessible, published, or distributed via the Application, including texts, images, videos, sounds, data, or any other element. Content includes, but is not limited to:

• The "noxs" created by Users, intended for other Users or for their own use, which are videos of a maximum duration of two minutes, intended to wake Users of the Application;
• The thumbnails of "noxs," which are images serving as covers for a "nox." They represent the content of the "nox" and are designed to capture attention at first glance in the Application;
• The "dreams" created by Users, which are photos or videos of a maximum duration of two minutes, intended to stay online in the Application for only 24 hours. "Dreams" allow the User to communicate daily with the community of Users who follow them in the Application;
• Collections of "dreams," which are groups of "dreams" organized into folders, directly accessible from the Users' profiles. Each collection is visually represented by a cover image, designed to evocatively illustrate the theme or common universe of the "dreams" it contains;
• Profile photos;
• Cover photos;
• Profile text descriptions;
• Comments posted in the comment section of a "nox";
• Text messages exchanged in messaging conversations;
• Photos exchanged in messaging conversations;
• Videos exchanged in messaging conversations;
• Voice messages exchanged in messaging conversations;
• GIFs exchanged in messaging conversations;
• Any file or information made available by the Publisher or third parties on the Application, provided it complies with copyright, the "Terms of Use", and applicable legislation.

The User declares and guarantees that they hold all the necessary rights for the publication, distribution, or availability of any Content via the Application, including copyright, image rights, or any other intellectual property rights. They agree to hold harmless and indemnify the Publisher against any claim, action, or damage resulting from a violation of applicable law or third-party rights.

Public Content: refers to any content visible to other Users beyond the creator, including public "noxs," public "dreams," comments, dream collections, or profile elements.

Private Content: refers to any content accessible only to one or more designated Users, such as private "noxs," private "dreams," or private messages.

Classic Content: refers to any content published on the Application that is neither sponsored, sensitive, nor prohibited. It may be public or private, depending on the settings chosen by the User at the time of publication, and remains subject to the present "Terms of Use" and the "Code of Conduct". Classic Content is the standard, unmarked form of content on the Application and carries no special labeling at the time of distribution.

Organic Content: refers to any content spontaneously published by a User or, where applicable, by the Publisher, without financial compensation, promotional intent, or any link to an advertising campaign, communication effort, or commercial partnership. Organic Content does not carry any commercial or promotional tag and is not subject to specific monetization-related processing. It may be public or private depending on the chosen publication settings and remains subject to the "Terms of Use" and the "Code of Conduct".

Sponsored Content: refers to any "nox" or "dream" published by a User on the Application with the "Sponsored Content" tag, activated at the time of publication to indicate that the content is shared for promotional or advertising purposes.This tag is mandatory whenever the content is published in exchange for financial gain, material benefit, or a visibility agreement with a third party, including the Publisher. It ensures transparency toward other Users and automatically displays the visible mention “Sponsored Content” when the content is played or opened.
The use of this tag, as well as the obligations associated with it, are defined in the "Advertising and Sponsored Content Policy", which all Users are contractually bound to.
Sponsored Content is distinct from commercial advertisements shown within the Application and content published as part of a Paid Partnership managed by the Publisher.

Prohibited Content: refers to any content, regardless of format or medium, that violates the "List of Prohibited Content", contravenes the contractual rules applicable to the Application (such as the "Terms of Use", the "Code of Conduct", or the "Moderation Policy"), or breaches applicable laws and regulations, particularly those concerning the protection of minors, public safety, fundamental rights, and intellectual property.
"Prohibited Content" triggers immediate moderation measures, contractual sanctions, or reports to the competent authorities, without the need for prior warning.

Sensitive Content: refers to any content published on the Application with the "Sensitive Content" tag, activated by the User at the time of publication due to its potentially shocking, disturbing, violent, sexual, or emotionally difficult nature. This tag is mandatory for such content to be tolerated on the Application. It is intended to restrict access, warn viewers, and protect Users—especially minors. Content that may offend sensitivities but is tolerated under certain conditions is defined in the "List of Prohibited Content". If published without the "Sensitive Content" tag, such content will be considered non-compliant and may be subject to moderation measures, including permanent and irreversible removal.

Sensitive Content Management Setting: refers to the system integrated into the Application that allows for the display or blocking of sensitive content based on the User’s age and declared preferences. This setting is automatic and non-editable for minors and customizable for adult Users.

Nox: refers to a video with a maximum duration of two minutes, primarily designed to wake a User of the Application in a fun and interactive way.

Renox: refers to a "nox" — a video of no more than two minutes designed to wake a User in a fun and interactive way — that has been republished by a User on their own profile.

Dream: refers to a photo or video that disappears after 24 hours, used to communicate with one’s community of Users.

Alarm: refers to the feature of the Application that allows the User to schedule or receive a "nox" at a specific time, for a personalized, social, and interactive wake-up experience.

Messaging: refers to the communication system integrated into the Application, allowing Users to exchange text messages, voice messages, photos, GIFs, and other files, either in private or group conversations.

Notification: refers to any message or alert sent to the User via the Application or through an external channel (push notification, email, etc.), for the purpose of providing information, reminders, security alerts, or promotional content, in accordance with the User’s communication preferences.

Subscription: refers to a contract concluded between the User and the Publisher, involving the payment of a fee in exchange for prolonged access to certain features, services, or exclusive content on the Application, for a fixed or renewable period.

NOX Premium: refers to the paid monthly subscription plan offered by the Publisher, providing the User with an enhanced experience of the Application, including the removal of unsolicited ads, advanced features, customization options, and exclusive benefits. Sponsored content and paid partnerships remain visible. The details and terms of the offer are defined in the "Terms of Use" and the "General Sales Conditions".

Personal Data or Personal Information: as defined by the General Data Protection Regulation (GDPR – EU 2016/679) and any equivalent or complementary national legislation, refers to any information relating to an identified or identifiable natural person. An “identifiable natural person” is one who can be recognized, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more specific elements related to their physical, physiological, genetic, psychological, economic, cultural, or social identity.

The processing of such Personal Data, carried out as part of the use of the Application and associated Services, is governed by the “Publisher's Privacy Policy”, available at https://www.nox.app/legal/privacy-policy.
The Publisher undertakes to comply with all applicable regulations concerning the protection of personal data, privacy, and the rights of data subjects.

Consent: refers to the free, informed, specific, and unambiguous expression by which the User agrees, through a clear affirmative action or declaration, to the processing of their personal data for one or more specific purposes.When data is collected through trackers, consent must be obtained before any placement or activation of non-essential trackers, in accordance with applicable regulations and the "Data Collection Policy". Consent can be withdrawn at any time via the Application's settings, without retroactive effect.

Privacy Settings: refers to all options available within the Application that allow the User to personalize how their personal data is managed, how visible their content is, or how exposed they are to certain types of sensitive content.

Data Collection:Data Collection: refers to any operation carried out by the Publisher, its third-party partners, or subcontractors involving the collection of personal or non-personal data related to Users of NOX. This may occur actively (e.g., through user input) or passively (e.g., through trackers or Application features), to ensure the proper functioning, continuous improvement, security, and personalization of the provided services. Data collected may include registration data, published or viewed content, user-defined preferences, technical data related to browsing or Application usage.

Browsing Data: refers to information automatically collected during the use of the Application, related to how the User accesses, uses, and interacts with features or content. This data may include, but is not limited to, the type and model of the Device used, operating system, interface language, session durations pages or content viewed, actions performed, errors encountered, technical performance or log data.
Browsing Data may be used for technical, statistical, analytical, or personalization purposes, in accordance with the "Data Collection Policy".

Advertising Network: refers to any entity, internal or external to the Publisher, responsible for the delivery, management, optimization, or performance measurement of advertising content distributed within the Application. Advertising Networks may use technologies such as trackers, SDKs, or advertising identifiers to adapt, target, or analyze ads. They may act on behalf of the Publisher or third parties, under the terms defined by the "Data Collection Policy" and the "Advertising and Sponsored Content Policy".

Third-Party Partner: refers to any external service provider, technology vendor, or collaborator with whom the Publisher works for the functioning, analysis, optimization, or monetization of the Application, and who may, in that capacity, collect, receive, process, or access User-related data.This includes, in particular partners involved in the deployment or activation of trackers (e.g., Google Ads, Firebase Analytics), those responsible for hosting, audience measurement, performance management, ad distribution, security, or data analysis. The terms governing the relationship between the Publisher and each Third-Party Partner are outlined in the "Data Collection Policy".

Processing: refers to any operation or set of operations performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation, modification, retrieval, consultation, use, disclosure, restriction, deletion, or destruction.

Tracker: refers to any technological device that enables the reading, writing, or collection of information on the User’s Device, either directly or indirectly, from the Application. This includes, but is not limited to cookies, SDKs, web beacons, tags, advertising identifiers (e.g., IDFA, GAID), or any similar mechanism.Trackers may be used for technical, functional, statistical, audience measurement, or advertising purposes, and may require prior User consent depending on their nature, in accordance with the "Data Collection Policy" and applicable regulations.

Essential Functional Trackers: refers to tracking technologies strictly necessary for the technical functioning of the Application or the provision of a service expressly requested by the User. These trackers do not require prior User consent, as they help ensure service security, session management, content synchronization, alarm triggering, proper functioning of essential Application settings.Their use is governed by the "Data Collection Policy" and complies with applicable legal requirements regarding privacy.

Consent-Based Trackers: refers to trackers or similar technologies used for non-essential purposes, including advertising, statistics, personalization, audience measurement, or profiling, which require the User’s free, informed, specific, and unambiguous consent. Consent must be obtained before any data is stored or read on the Device, either during Application installation or via Privacy Settings. The User may withdraw consent at any time, without retroactive effect, in accordance with the "Data Collection Policy".

SDK (Software Development Kit): refers to a third-party software module integrated into the Application, enabling the addition of technical features, interfacing with external services, or collecting behavioral data about Users. SDKs may be used for audience analysis, performance measurement, marketing attribution ad management security, authentication. Some SDKs may include consent-based trackers, especially when they access advertising identifiers or perform profiling. Their use is governed by the "Data Collection Policy".

Tag: refers to a piece of code embedded in the Application, used to trigger a tracking event or record a user interaction, typically for measurement, targeting, or marketing performance purposes. A tag may be used, for example, to track an impression or click, trigger a conversion in an ad campaign, transmit data to an analytics tool or advertising network.

Tracking Pixel or Spy Pixel: refers to a snippet of code or invisible image (usually 1x1 pixel in size) embedded in the Application interface, enabling the tracking of content display, loading, or interaction by the User for analytics, audience measurement, or advertising performance purposes. These pixels may transmit information to third-party tools or advertising networks, particularly for retargeting or conversion campaigns, and are subject to the User's prior consent when involving the processing of personal data.

Advertising Identifier: refers to a unique, resettable identifier assigned by the operating system of the Device (e.g., IDFA on iOS or GAID on Android), allowing the tracking of the User’s advertising preferences and the delivery of personalized or targeted ads. This identifier may be used by the Publisher or third-party partners for performance measurement, retargeting, or behavioral analysis. Its use is subject to the User’s prior consent, in accordance with the "Data Collection Policy" and applicable privacy regulations.

Advertisement: refers to any content displayed within the Application for promotional or commercial purposes, intended to promote a product, service, brand, or entity. Advertising may be delivered by the Publisher, third-party advertising networks, or Users in the context of sponsored content, and may take various forms (banners, interstitials, videos, tagged organic posts, etc.). It is distinct from editorial or personal content by its commercial purpose.

External Advertising: refers to any form of advertising inserted into the Application via a third-party advertising network, such as Google Ads. It may be automatically displayed in the interface (banners, interstitials, videos, etc.), based on distribution settings defined by the network and the User’s preferences. The display of External Advertising is subject to the User’s consent, especially when it involves trackers or advertising identifiers (IDFA, GAID).

Internal Advertising: refers to any advertisement displayed within the Application by the Publisher, either directly or via its own advertising system. It may promote the Publisher’s services, content, or offers, or those of selected partners within the context of promotional agreements. Internal Advertising may appear as visuals, videos, suggestions, notifications, or dedicated placements within the interface. It may be contextual or targeted, depending on the User’s settings and consent when personal data processing is required.

Targeted Advertising: refers to any form of advertisement personalized based on the User’s data, such as browsing behavior, profile, interactions, or preferences. It may be delivered by a third-party network (as part of External Advertising) or by the Publisher (as part of Internal Advertising), subject to the User’s prior consent in accordance with applicable regulations. Activating Targeted Advertising involves the use of advertising identifiers or trackers for profiling purposes.

Paid Partnership: refers to any agreement between the Publisher and a third-party entity resulting in the display of promotional or advertising content within the Application. These contents are published directly by the Publisher in an organic format and are clearly labeled as “Paid Partnership.”This type of content is the sole responsibility of the Publisher and is distinct from Sponsored Content (published by Users) and advertisements delivered by internal or external ad networks. The terms applicable to Paid Partnerships are defined in the "Advertising and Sponsored Content Policy".

Creator: refers to a User who publishes original or creative content on the Application, for which they are either the author or the holder of the necessary distribution rights. The Creator is responsible for ensuring compliance with applicable intellectual property rights and agrees to only publish content that complies with the contractual rules of the Application.

Protected Work: refers to any original intellectual creation expressed in a perceptible form and meeting the conditions for protection under the French Intellectual Property Code. This includes, but is not limited to, literary, artistic, musical, audiovisual, graphic, visual, photographic, software, digital, or multimedia creations.

Intellectual Property: refers to all exclusive rights granted by law to individuals or legal entities over their intellectual, artistic, technical, or commercial creations. This includes copyright and related rights of performers, producers, and publishers; rights over databases; and industrial property rights such as trademarks, designs, models, and patents. These rights give their holders control over the use, reproduction, performance, or distribution of their works, creations, or distinctive signs, in accordance with the provisions of the Intellectual Property Code and applicable international agreements.

License of Use: refers to the authorization granted by a rights holder, allowing the Publisher or a User to use a protected work or content within the limits defined by the agreed conditions. The license may cover various rights (reproduction, representation, adaptation, etc.) and specify the duration, geographic scope, authorized uses, and any applicable restrictions. It does not transfer intellectual property but provides a legal framework for lawful exploitation under applicable provisions.

Licensed Content: refers to music, works, or protected elements made available by the Publisher within the Application, for which a valid license has been obtained. This license allows, under the conditions defined by the Publisher, Users to incorporate such content into their own creations published on the Application. The use of Licensed Content remains subject to compliance with associated rights, any limitations set out in the license, and applicable contractual rules.

Infringement: refers to any use, reproduction, performance, distribution, modification, or adaptation of a protected work without the prior authorization of the rights holder, constituting a violation of their intellectual property rights. Infringement may apply to literary, artistic, musical, audiovisual, software, or any other protected content and may result in civil and criminal liability in accordance with the Intellectual Property Code and applicable laws.

Third Party: refers to any individual or legal entity not party to the contractual relationship between the Publisher and the User, and who is neither acting as the Publisher nor as a User of the Application. A Third Party may, for instance, be a rights holder of published content or be affected by a creation, publication, data processing, or use within the Application without directly participating in it.

Moderation: refers to all actions carried out by the Publisher’s dedicated human moderation team to monitor, assess, classify, process, restrict, or remove content or behavior reported or identified as contrary to the Application’s contractual rules, the law, or the ethical standards defined by the Publisher. Moderation may be reactive (following a report) or proactive (based on internal checks), and aims to ensure a compliant, safe, and respectful environment for all Users.

Report: refers to the feature available to Users that allows them to notify the Publisher, via the Application, of any content, behavior, or profile potentially violating the present contractual policies, applicable laws, or the rights or safety of an individual— particularly a child. A report may trigger a priority review by the human moderation team, in accordance with procedures outlined in the "Moderation Policy" and the "Child Safety Policy".

Report Category: refers to the descriptive category selected by the User when submitting a report, used to classify the presumed nature of the violation (e.g., hate speech, harassment, identity theft, inappropriate content, child endangerment, etc.). The Report Category guides how the moderation team processes the report and may, in some cases, automatically trigger the display of specific forms adapted to the severity or nature of the content in question.

Content Author: refers to the User who originally published, shared, or made content available on the Application, including content that becomes the subject of a report. The Content Author is legally responsible for complying with contractual rules, applicable rights, and legal obligations related to that content.

Complainant: refers to the User who initiated a report by notifying the Publisher of content, behavior, or a profile they believe violates the contractual rules or violates the contractual rules or applicable law. The identity of the Complainant remains strictly confidential and is never disclosed to the Content Author, unless required by law or judicial order.

Sanction: refers to any action taken by the Publisher against content, behavior, or a User that violates the contractual rules, current legislation, or the standards defined by the Publisher. Sanctions may include, but are not limited to: reclassification or removal of content; temporary or permanent restriction of functionalities, suspension or deletion of the user’s account, reporting to competent authorities in the case of serious misconduct or suspected criminal offense. The application of sanctions is at the sole discretion of the Publisher, in accordance with its "Moderation Policy".

Competent Authorities: refers to all judicial, administrative, law enforcement, or institutional authorities legally empowered to receive, process, or request information, reports, or evidence related to the protection of minors, the prevention of criminal acts, the fight against illicit content, and the suppression of dangerous behavior. This includes, but is not limited to, police or gendarmerie services, judicial authorities, independent authorities (such as regulatory agencies), any entity legally designated for this purpose under applicable law.

Legal Notices: refers to the document prepared in accordance with current French and European legislation intended to inform the User of key aspects related to the use of the service. It outlines the identification details of the Publisher, hosting information, intellectual property rights, data processing terms, and legal responsibilities of both the User and the Publisher, particularly under the French Law for Confidence in the Digital Economy (LCEN), the General Data Protection Regulation (GDPR), and the Digital Services Act (DSA). This document is available at the following address: https://www.nox.app/legal/legal-notice.

Terms of Use (CGU): refers to the contractual document governing the conditions of access, use, and operation of the Application, as well as the respective rights and obligations of the Publisher and the User. This document specifically defines the rules of User behavior, the conditions for content publication, the liability limits of each Party, the moderation procedures implemented, and the applicable sanctions in the event of a breach. The "Terms of Use" constitute a legally binding contract that must be accepted in order to access the services offered through the Application. This document is available at the following address: https://www.nox.app/legal/terms-of-use

General Sales Conditions (CGV): refers to the contractual document governing commercial relations between the Publisher and the User in the context of paid offers proposed on the Application. The "General Sales Conditions" detail subscription conditions, payment terms, commitment periods, cancellation procedures, as well as applicable rights regarding withdrawal or refund. They are legally binding for any individual subscribing to a paid service on the Application. This document is available at the following address: https://www.nox.app/legal/terms-of-sale

Privacy Policy: refers to the document outlining the Publisher’s commitments regarding the protection of personal data processed in the context of using the Application. It defines the purposes of data processing, legal bases, recipients, retention periods, Users’ rights (access, rectification, deletion, objection, portability, restriction), as well as the contact methods for exercising those rights.
It is directly linked to the "Data Collection Policy", which constitutes a complementary technical component detailing how information is actually collected via the Application. This document is available at the following address: https://www.nox.app/legal/privacy-policy

Data Collection Policy: refers to the document that details the technical modalities for data collection within the Application, whether data is voluntarily entered by the User or collected automatically (identifiers, logs, trackers, SDKs, etc.). It distinguishes the types of data collected, their sources, the tools used, and the contexts of collection.
It serves as the technical extension of the "Privacy Policy", supplementing it by informing Users precisely about how data processing is carried out, in accordance with the GDPR. This document is available at the following address: https://www.nox.app/legal/data-collection-policy

Illicit Content Reporting and Removal Policy: refers to the document that defines the procedure through which Users or any third party can report content that is illegal or contrary to current laws, as well as the methods for handling, removing, notifying, and contesting such reports. This policy is established in compliance with the obligations set out in the LCEN, the Digital Services Act (DSA), and the DMCA. This document is available at the following address: https://www.nox.app/legal/reporting-policy

Child Safety Policy: refers to the document that outlines the specific measures implemented by the Publisher to ensure the protection of minors on the Application. It defines age restrictions, parental control mechanisms, enhanced moderation rules, and the Publisher's commitments to preventing risks related to sensitive content or inappropriate interactions. This document is available at the following address: https://www.nox.app/legal/child-safety-standards-policy

Copyright and Intellectual Property Policy: refers to the document that defines the rules applicable to the use, publication, and protection of content protected by copyright or other intellectual property rights within the Application. It details the Publisher’s rights, the obligations of Users, procedures for reporting infringement, and the conditions for content removal or sanction in the event of a violation. This document is available at the following address: https://www.nox.app/legal/copyright-policy

Advertising and Sponsored Content Policy: refers to the document governing the distribution of advertising, promotional, or sponsored content on the Application. It outlines transparency obligations, rules for identifying sponsored content, legal compliance requirements, applicable restrictions, and the Publisher’s commitments to commercial ethics and User protection. This document is available at the following address: https://www.nox.app/legal/advertising-policy

Moderation Policy: refers to the document describing the principles, criteria, and moderation procedures applied within the Application. It governs the monitoring of published content, removal, suspension or alert actions, and the recourse available to Users. It aims to ensure a respectful, safe, and legally compliant environment. This document is available at the following address: https://www.nox.app/legal/moderation-policy

List of Prohibited Content: refers to the document that provides a non-exhaustive list of content types that are either tolerated or prohibited on the Application, such as violent, hateful, discriminatory, sexual, illegal, or misleading content. This list serves to inform Users of the boundaries not to be crossed and is used as a reference for moderation and sanction actions. This document is available at the following address: https://www.nox.app/legal/prohibited-content

Code of Conduct: refers to the document establishing the behavioral expectations for Users within the Application. It promotes kindness, respect, civility, inclusion, and responsible use of social features. It serves as an ethical guide that complements the legal and contractual obligations outlined in the other policy documents.This document is available at the following address: https://www.nox.app/legal/code-of-conduct

Legal Provisions for the Attention of the Authorities: refers to the reference document established by the Publisher, intended exclusively for administrative, judicial, law enforcement, or regulatory authorities. Its purpose is to structure, formalize, and facilitate legal and technical cooperation with such authorities. This document defines the procedures for communication, reporting, requisition, information sharing, or content removal, in compliance with the applicable legal framework, including the provisions of the LCEN, the GDPR, the Digital Services Act, and the Code of Criminal Procedure. It is available at the following address: https://www.nox.app/legal/provisions-for-authorities

2. IDENTIFICATION OF THE PUBLISHER AND OFFICIAL CONTACT OF THE AUTHORITIES

The "NOX – The Social Alarm Clock" application is published, developed, operated and administered by the company LAPSUS, a simplified joint-stock company (SAS) under French law, duly registered with the Bourg-en-Bresse Trade and Companies Register under number 879 161 818.

Legal information of the Publisher:

• Company name: LAPSUS
• Legal form: Simplified joint stock company (SAS)
• Registered office: 10 rue Louis Amiot, 01000 Bourg-en-Bresse, France
• Share capital: 12,000 euros
• RCS / SIREN number: 879 161 818
• Intra-community VAT number: FR79879161818
• Legal representative: Mr. Luc Nouguier, President
• Official website: https://lapsus.tech

Any request from a judicial, administrative, police, customs or regulatory authority must be sent to the following address, strictly reserved for this purpose: authorities@nox.app

This address is accessible exclusively to duly authorised representatives of the competent authorities. It is processed by a designated team, acting under the responsibility of the Publisher, within the framework of the laws in force and in compliance with the rules of confidentiality, security and traceability.

Requests addressed to this address must, as far as possible, comply with the procedural arrangements set out in the following parts of this document. This ensures their admissibility, traceability, and processing as quickly as possible.

3. SCOPE OF INTERVENTION OF THE COMPETENT AUTHORITIES

This cooperation policy applies exclusively to requests made by a legally authorised authority, in the exercise of its control, investigation, reporting or requisition missions.

In particular, the following entities are considered to be competent authorities within the meaning of this document, subject to their legal authorisation:

• The French judicial authorities, including public prosecutors, investigating judges, magistrates, criminal and civil courts, as well as registries acting on requisition or judicial decision;
• Police, gendarmerie or customs services, acting on judicial orders or requisitions, or in the context of a legitimate investigation in connection with an offence or a proven danger;
• Independent administrative or regulatory authorities such as ARCOM, the CNIL or any other entity entrusted with control missions relating to content, privacy or online security;
• Specialised investigation services, including units in charge of the fight against cybercrime, child pornography (CSAE/CSAM), terrorism or serious crimes against persons;
• Foreign or international judicial authorities, in the context of a request based on an instrument of international cooperation in criminal or administrative matters (convention, mandate, MLAT, decision on mutual assistance, etc.).

This scope also covers requests made within the framework of European or international cooperation mechanisms, provided that they comply with the principles of territoriality, subsidiarity and empowerment, and that they are addressed in the forms provided for by the applicable law or conventions.

Private persons or bodies not vested with a public authority shall not be entitled to rely on these provisions. They may, however, use the reporting channels available to Users, or address any queries to the general contact address: legal@nox.app

4. LEGAL FRAMEWORK FOR COOPERATION

The cooperation between the Publisher of the "NOX – The Social Alarm Clock" Application and the competent authorities is part of a strict legal framework, based on the provisions of French law, European Union law, and, where applicable, the applicable international conventions on digital services, data protection, online crime and the safety of minors.

The main legal bases for this cooperation include:

In French law:

• Law No. 2004-575 of 21 June 2004 on Confidence in the Digital Economy (LCEN), in particular Articles 6-I-7 and 6-II, which require the Publisher to retain certain technical data and to communicate them to the judicial authorities upon requisition or decision;
• The Code of Criminal Procedure, in particular the provisions relating to judicial requisition, digital searches, lifting of anonymity or data entry;
• The Criminal Code, in that it defines the offences that may justify a request for removal, blocking or reporting, in particular in relation to child pornography, incitement to hatred, cyberharassment or fraud.

In European Union law:

• Regulation (EU) 2016/679 on the protection of personal data (GDPR), which provides a framework for the collection, storage, communication and security of personal data processed in the context of requests from the authorities;
• The Digital Services Act (DSA) 2022/2065, in particular Articles 9 to 11, 14, 16, 18, 20 and 86 thereof, relating to transparency, notification of orders, removal of content and cross-border cooperation between authorities;
• Regulation (EU) 2023/1543 on combating online child sexual abuse, which is currently in force, which provides for specific obligations to report and immediately remove child sexual abuse material (CSAM).

Within the framework of international cooperation:

• The Budapest Conventions (Council of Europe Convention on Cybercrime);
• MLATs (Mutual Legal Assistance Treaties) signed by France or the European Union with third countries;
• Sectoral or bilateral agreements providing for the exchange of information or the execution of requests between judicial authorities.

The Publisher undertakes to comply with all of these texts, in compliance with fundamental rights, the principle of proportionality, the purpose of processing, and data security.

No communication of information to an authority will be made outside this legal framework, except in the event of a serious, imminent and documented danger.

5. PROCEDURE FOR REQUESTING ACCESS OR DISCLOSURE OF INFORMATION

Any request for the communication of information, the lifting of anonymity, the identification of a User or access to content or data hosted by the Publisher must follow a strict procedure, in accordance with legal requirements and the principles of security, confidentiality and traceability.

6. IDENTIFICATION OF REPORTED CONTENT OR ACCOUNTS

In order to ensure a timely, accurate and compliant processing of requests for access or removal of content, authorities are invited to provide explicit and verifiable technical identification elements. The Publisher may not be required to carry out in-depth or cross-referencing searches without sufficient information.

7. CONDITIONS OF COMMUNICATION WITHOUT A COURT DECISION

In certain situations, the Publisher may be required to spontaneously communicate information to the competent authorities, or to respond to a request that is not yet based on a requisition or a formal judicial decision. This communication is only made in exceptional cases, strictly regulated, in accordance with the legislation in force.

8. SECURITY, PRIVACY AND RETENTION COMMITMENTS

The Publisher of the Application "NOX – The Social Alarm Clock" attaches major importance to the security of exchanges, the protection of data communicated in the context of requisitions, and the preservation of evidence in compliance with the law.

9. CONTENT REMOVAL, BLOCKING, OR REMOVAL POLICY

The Publisher of the Application "NOX – The Social Alarm Clock" has implemented a policy of deletion and removal of content in accordance with French and European legislation. This policy guarantees both the freedom of expression of Users, the fight against abuse, and cooperation with the authorities in the handling of illegal or problematic content.

10. RESPONSE TIME, TRACEABILITY AND FOLLOW-UP OF REQUESTS

The Publisher of the "NOX – The Social Alarm Clock" Application undertakes to deal rigorously, transparently and expeditiously with the requests made by the competent authorities. It implements a dedicated internal system guaranteeing responsiveness, complete traceability, and security of exchanges.

11. APPLICABLE LAW AND JURISDICTION

This cooperation policy, as well as all relations established between the Publisher of the "NOX – The Social Alarm Clock" Application and any requesting authority, are governed by the following rules of law:

• French law, insofar as it constitutes the main legal framework applicable to the Publisher, a company incorporated under French law registered in France;
• European Union law, in particular the General Data Protection Regulation (GDPR – EU 2016/679) and the Digital Services Act (DSA) 2022/2065, applicable to any online service provider operating in the EU.

In the event of a dispute or difference relating to the interpretation, application or execution of this policy, and in the absence of an amicable resolution, the competent courts will be those within the jurisdiction of the Publisher's registered office, i.e. the courts of Bourg-en-Bresse, unless otherwise provided by mandatory law.

This clause cannot, however, deprive a foreign or European authority of the right to bring a matter before a competent court, if necessary, pursuant to an international agreement, a mutual assistance agreement or a specific cooperation mechanism recognised by France or the European Union.

12. ENTRY INTO FORCE, UPDATE AND ACCESS TO THE DOCUMENT

This part specifies the terms and conditions for the entry into force, updating and accessibility of this document. It defines the time from which the provisions apply, the conditions under which they may evolve, as well as the means made available to the authorities to access them permanently. These elements guarantee the transparency, legal certainty and traceability of the commitments made by the Publisher to the competent authorities.

13. RESERVATION CLAUSE AND GENERAL CONTACT

This document is prepared as a reference for the competent authorities. It is not intended to replace the law or to limit the legal prerogatives of the authorities, nor those of the Publisher within the framework of the applicable regulations. In the event of any contradiction between this document and a mandatory legal provision, the latter shall prevail.

For any request or clarification relating to the interpretation of this document, the authorities can send a message to the dedicated address: authorities@nox.app